fixed longword overflow and xss